Trond Myklebust e9f7bee1df [PATCH] NFS: large non-page-aligned direct I/O clobbers memory
The logic in nfs_direct_read_schedule and nfs_direct_write_schedule can
allow data->npages to be one larger than rpages.  This causes a page
pointer to be written beyond the end of the pagevec in nfs_read_data (or
nfs_write_data).

Fix this by making nfs_(read|write)_alloc() calculate the size of the
pagevec array, and initialise data->npages.

Also get rid of the redundant argument to nfs_commit_alloc().

Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
Cc: Chuck Lever <chuck.lever@oracle.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2006-09-08 10:22:51 -07:00
..
2006-07-02 15:10:20 -07:00
2006-03-20 13:44:48 -05:00
2006-06-09 09:34:33 -04:00
2006-06-25 12:30:33 -07:00
2006-06-09 09:34:33 -04:00
2006-06-09 09:34:33 -04:00
2006-06-09 09:34:25 -04:00
2006-06-09 09:34:33 -04:00
2006-06-09 09:34:33 -04:00
2006-06-25 06:38:47 -04:00
2006-06-25 06:39:35 -04:00
2006-03-20 13:44:10 -05:00